The issue was addressed with improved input validation. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. A malicious website may exfiltrate data cross-origin.Referenceshttps://support.apple.com/en-us/127594https://support.apple.com/en-us/127595https://support.apple.com/en-us/127685https://support.apple.com/en-us/128068https://support.apple.com/en-us/128069https://support.apple.com/en-us/128070
